CVE-2024-35248

Summary

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 122.0.0 < Application Build 22.13.64344, Platform Build 22.0affected
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 223.0.0 < Application Build 23.7.18957, Platform Build 23.0.affected
MicrosoftMicrosoft Dynamics 365 Business Central 2024 Release Wave 124.0 < Application Build 24.1.19498, Platform Build 24.0.affected

Weaknesses

  • CWE-1390: CWE-1390: Weak Authentication

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

CVE Program Container

Additional References

References